Skip to content

Commit 2a717b3

Browse files
fix(security): patch semantic-release dependency vulnerability (#969)
chore(deps-dev): bump semantic-release from 19.0.2 to 19.0.3 Bumps [semantic-release](https://github.com/semantic-release/semantic-release) from 19.0.2 to 19.0.3. - [Release notes](https://github.com/semantic-release/semantic-release/releases) - [Commits](semantic-release/semantic-release@v19.0.2...v19.0.3) --- updated-dependencies: - dependency-name: semantic-release dependency-type: direct:development ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent ca7bad3 commit 2a717b3

File tree

2 files changed

+5
-5
lines changed

2 files changed

+5
-5
lines changed

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -64,7 +64,7 @@
6464
"mysql2": "2.1.0",
6565
"onchange": "6.0.0",
6666
"pg": "8.4.2",
67-
"semantic-release": "19.0.2",
67+
"semantic-release": "19.0.3",
6868
"semantic-release-npm-deprecate-old-versions": "1.3.2",
6969
"semantic-release-slack-bot": "3.5.2",
7070
"sequelize": "5.21.3",

yarn.lock

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -8951,10 +8951,10 @@ [email protected]:
89518951
node-fetch "^2.3.0"
89528952
slackify-markdown "^4.3.0"
89538953

8954-
8955-
version "19.0.2"
8956-
resolved "https://registry.yarnpkg.com/semantic-release/-/semantic-release-19.0.2.tgz#6011683c06d7b416e5faa5a3f43b22bbf3798aa8"
8957-
integrity sha512-7tPonjZxukKECmClhsfyMKDt0GR38feIC2HxgyYaBi+9tDySBLjK/zYDLhh+m6yjnHIJa9eBTKYE7k63ZQcYbw==
8954+
8955+
version "19.0.3"
8956+
resolved "https://registry.yarnpkg.com/semantic-release/-/semantic-release-19.0.3.tgz#9291053ad9890052f28e7c5921d4741530d516fd"
8957+
integrity sha512-HaFbydST1cDKZHuFZxB8DTrBLJVK/AnDExpK0s3EqLIAAUAHUgnd+VSJCUtTYQKkAkauL8G9CucODrVCc7BuAA==
89588958
dependencies:
89598959
"@semantic-release/commit-analyzer" "^9.0.2"
89608960
"@semantic-release/error" "^3.0.0"

0 commit comments

Comments
 (0)